Discussions

WebGL can easily be disabled from a command line option passed into most WebGL compliant browsers. Also; who says that WebGL HAS to run whenever a page requests it? Couldn't browsers make it so the user is required to OK the use of WebGL before it runs on the system? There's nothing that says that a browser can't do this.

A prompt doesn't help - the prompt would be "Do you want to see the 3d dancing bunnies?" And there is only one reasonable answer to that prompt: Yes. Because the user ALWAYS wants to see the dancing bunnies.

The key point of the blog post: Silverlight and your web browser were hardened against attacks because they were designed to run in a hostile environment. The graphics driver for your display adapter wasn't.

metro style apps run in something called an appcontainer to prevent them from interacting with other applications on the system. And I'm sure that all metro style applications will have to enable safe SEH and ASLR to improve their resiliency to threats. But the appcontainer isn't about stopping malware. It's about helping ensure that windows 8 end-users won't ever regret installing an application.

@DevTomSch:That is *so* untrue. Windows worked extremely closely with the developer division throughout the design of the windows runtime. The Windows runtime isn't an "anti CLR", the CLR is still there and is alive and well.

In many ways, the windows runtime is the opposite of an "anti-CLR" - with the windows runtime, the windows division is embracing the javascript and the managed languages as equals to C/C++. Before windows 8, the windows division only supported APIs for C and C++ developers, C# and VB developers were kind-of stuck. Now they have full access to windows APIs with the operating system.

And of course as nominees we'll get VIP passes, right? I mean for the nominees not to get VIP passes would just be wrong, wouldn't it. It would be against Nature's Law and we wouldn't want that, would we?

There are some *fascinating* attacks that can be made on google searches when you turn off SSL. I recently watched a video where some researchers were able to figure out what you were searching for. On a WiFi network. *WITHOUT* joining the network.